2561ee60200946fb15c135556c18afd4 | Triage

Sharing

General

Target

2561ee60200946fb15c135556c18afd4
Size

166KB
MD5

2561ee60200946fb15c135556c18afd4
SHA1

c51cc8caa0a8fb43a26fd6888e3ffaed28b31dc0
SHA256

c463508379aa9f1148fda0e0601c7a45413e304d00fea4eede57c99fbd85d6c0
SHA512

c020f4ca47d3f1d2b30164453f1b8246c6d2d97caea3af4668219b9590f9fe9ef077271b6f7cd978410691ec8b6aff0c7b1cd132c33f1db4bc37430c5a54baeb
SSDEEP

3072:BQWGyUALvEFyuhH3NPCpOBknkljtsF4HPITH93X/16tAkHY4qSdbh07oJ:KXRjFyuhH30OqkjEbH9f166kF07g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2561ee60200946fb15c135556c18afd4

Files

2561ee60200946fb15c135556c18afd4
.exe windows:4 windows x86 arch:x86

1359a50ea21b312f0f42427815c5f387

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE